Senior NSX Engineer with Security Clearance

B/CORE; Springfield (VA); On-site; USD 122,000 - 150,000; Full time

Job summary

BCore in Springfield, VA is seeking a Senior NSX Engineer to design, implement, and operate VMware NSX-based networking for a mission-critical NGA environment. The role requires an active TS clearance with SCI eligibility and CI poly eligibility, and hands-on NSX and vSphere expertise.

You will own the full NSX lifecycle—from architecture and deployment to security hardening, automation, and incident response—while collaborating with cybersecurity, RMF, and network teams to maintain compliance

Qualifications

• Active TS clearance with SCI eligibility and CI poly eligibility.
• 5+ years of hands-on VMware NSX experience in enterprise environments.
• 5+ years of VMware vSphere experience including ESXi, vCenter, and VDS.
• Bachelor's degree or equivalent in IT, CS, or engineering.

Responsibilities

• Design, implement, and operate NSX-T / VCF networking across prod and mission environments.
• Lead upgrades, patches, and lifecycle management with tested backouts.
• Develop auditable firewall policies and microsegmentation strategies.
• Collaborate with cybersecurity, RMF, and network teams for auditing and compliance.
• Provide Tier-3 escalation support and mentor junior engineers.

Skills

NSX-T / VCF Networking

BGP & Routing

Security & Microsegmentation

vSphere Networking

Automation & IaC

Education

Bachelor's degree in IT/CS/Engineering/C cybersecurity or related

Tools

PowerCLI

Ansible

REST APIs

Job description

Senior NSX Engineer Springfield, VA Active TS (SCI eligibility) clearance and eligibility to obtain a CI poly At Bcore, our strength comes from how we deliver impact to the mission. Whether it’s architecting critical IT solutions, producing actionable intelligence, or developing cutting edge technology, we succeed because of the expertise, collaboration, and agility of our teams. Our Mission Services division combines enterprise IT, cloud solutions, DevSecOps, systems engineering, software development, and operational support. Bcore accelerates decisive advantage for warfighters and intelligence professionals by fusing human insight, rapid-fire engineering, precision-measured outcomes, and relentless grit into mission-ready solutions. Do you want to join a team that is building tailored technical solutions to modernize our government’s mission and our client’s business? Do you have a desire to change how people work? Are you interested in helping to protect our nation’s cyber interests? Join our growing team as a Senior NSX Engineer, supporting the NGA customer mission.

Responsibilities

What you get to do every day: We are seeking an experienced Senior NSX Engineer to design, implement, operate, secure, and troubleshoot VMware NSX-based network virtualization solutions supporting a mission-critical U.S. Department of War environment. The ideal candidate brings 5+ years of hands-on VMware NSX engineering experience, strong VMware vSphere and VMware Cloud Foundation (VCF) integration knowledge, and the ability to own the full NSX lifecycle from architecture and deployment through security hardening, automation, upgrades, and Tier 3 incident resolution.

Key Responsibilities

* Design, deploy, configure, operate, and sustain VMware NSX-T / VMware Cloud Foundation Networking across production, development, test, and mission environments.

• Engineer NSX Manager clusters, transport nodes/profiles, transport zones, uplink profiles, VDS/N-VDS networking, and NSX Edge clusters.
• Design and administer overlay and VLAN-backed segments, Tier-0/Tier-1 gateways, distributed routing, BGP, static routing, ECMP, route redistribution, and north‑south/east‑west connectivity.
• Implement microsegmentation and Zero Trust-aligned controls using Distributed Firewall, Gateway Firewall, security groups, dynamic membership, tags, context profiles, and policy-based security.
• Develop auditable, least‑privilege firewall policies in coordination with cybersecurity, ISSO/ISSM, RMF, application, and network teams.
• Integrate NSX with vCenter, vSphere, VCF, vSAN, VMware Aria Operations/Logs, PKI, identity, SIEM, vulnerability‑management, and enterprise monitoring platforms.
• Troubleshoot BGP/routing adjacency failures, MTU/TEP/Geneve issues, asymmetric routing, firewall processing, packet loss, performance degradation, and NSX Edge failures.
• Perform packet‑level analysis using NSX CLI/nsxcli, vmkping, pktcap-uw, tcpdump‑uw, Traceflow, flow monitoring, and distributed firewall analysis.
• Lead NSX upgrades, patching, certificate replacement, migrations, backup/recovery validation, and lifecycle‑management activities with formal implementation, test, validation, and backout plans.
• Maintain engineering standards, configuration baselines, diagrams, firewall matrices, runbooks, and as‑built documentation; provide Tier 3 escalation support and mentor junior engineers.

Core Technical Competencies

* NSX Architecture: NSX Manager clusters, transport zones/nodes, Edge clusters, segments, gateways, and security policies.

• Routing: BGP, static routing, ECMP, route redistribution, Tier-0/Tier-1 routing, and physical‑network integration.
• Network Security: Microsegmentation, Distributed/Gateway Firewall, dynamic groups, tagging, rule analysis, and least‑privilege policies.
• vSphere Networking: vCenter, ESXi, VDS, VMkernel, vmnic, port groups, cluster networking, and host‑level troubleshooting.
• Advanced Troubleshooting: Traceflow, NSX CLI, ESXi packet capture, BGP diagnostics, flow analysis, logs, and packet‑level troubleshooting.
• Operations & Compliance: Upgrades, backup/recovery, certificates, lifecycle management, RMF, STIGs, ATO support, vulnerability remediation, and change control.
• Automation & Documentation: PowerCLI, Ansible, REST APIs, Git; diagrams, runbooks, firewall matrices, test plans, validation procedures, and backout plans.

Qualifications

• Clearance Required: Active TS clearance (with SCI Eligibility) and eligibility to obtain CI Poly Certification Required: * Current CompTIA Security+ CE or another approved DoW 8140-aligned baseline certification * One current VMware/Broadcom networking, security, or VMware Cloud Foundation certification, such as VCP-NV, VMware Cloud Foundation Administrator, VMware Cloud Foundation Architect, or a comparable current NSX/VCF networking certification Education/Experience: * Requires Bachelor’s degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline; equivalent relevant experience may be substituted
• 5+ years of experience of hands‑on VMware NSX experience in enterprise‑scale environments and 5+ years of VMware vSphere experience, including ESXi, vCenter Server, VDS, virtual networking, cluster operations, and troubleshooting Required Skills: * Advanced NSX‑T / VCF Networking expertise: overlay/VLAN segments, Tier‑0/Tier‑1 gateways, Edge Nodes/clusters, BGP, static routing, ECMP, route redistribution, Distributed Firewall, Gateway Firewall, dynamic groups/tagging, NAT, VPN, DHCP, and lifecycle operations.
• Strong enterprise networking fundamentals: TCP/IP, DNS, DHCP, ARP, VLANs, VXLAN/Geneve, MTU, BGP, OSPF, VRFs, link aggregation, firewalling, NAT, load balancing, and network troubleshooting.
• Experience in DoW, federal civilian, intelligence community, or other highly regulated environments with formal change control, security approval, documentation, and audit requirements.
• Working knowledge of RMF, ATO, DISA STIGs, POA&Ms, vulnerability management, security controls, continuous monitoring, and remediation of applicable security findings.
• Strong written and verbal communication skills, including technical diagrams, implementation plans, SOPs, security documentation, and executive‑ready status updates.
• What is ideal? * Experience designing or supporting VMware Cloud Foundation, including SDDC Manager, workload domains, lifecycle management, vSphere, and NSX integration.
• Experience integrating NSX with Cisco Nexus, Juniper, Palo Alto Networks, F5, or similar enterprise technologies.
• Experience with VXLAN/Geneve overlays, BGP underlay/overlay routing, multi‑rack architectures, and highly available network services.
• Automation / Infrastructure as Code experience using PowerShell/PowerCLI, Ansible, VMware Aria Automation, REST APIs, Git, YAML, and JSON.
• Experience integrating NSX telemetry and logs with Splunk, Elastic, or comparable SIEM/observability platforms.
• Experience with enterprise PKI, certificate lifecycle management, Active Directory, LDAP, identity federation, RBAC, privileged‑access management, and MFA.
• Experience supporting classified, disconnected, air‑gapped, or tactical‑edge environments.
• Familiarity with Dell PowerEdge, Cisco UCS, HPE, DISA STIG Viewer, SCAP scanning, ACAS/Nessus, and POA&M remediation workflows.
• Intelligence Community Experience preferred
• What you can expect from us * Recognizing great achievements do not go unnoticed by bcore through service anniversaries, spot awards, and employee referral bonuses
• You’ll join a growing organization of passionate, top‑shelf, IT engineering professionals with extensive experience in actively developing the technology revolution in the Intelligence community * The expected salary range within the Washington, DC metropolitan area is: $122,000-$150,000. Final compensation is unique to each individual and will be determined based on factors such as experience, education, geographic location, and contractual requirements. This is not a guarantee. * Benefits include Health/Dental/Vision, 401(k), Paid Time Off, STD/LTD/Life Insurance/Voluntary Life Insurance, Stipends, Referral Bonuses, and more. BCore is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.